Security Posture ICSSCADA Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A power generation facility has a strong security posture, but the security team wants to maintain it over time. Which practice is most important for sustaining the posture?

   • ARely on the IT department to handle all security updates for the ICS.
   • BFocus only on compliance requirements and avoid additional security investments.
   • CKeep the same security measures in place without changes to avoid introducing new risks.
   • DConduct periodic security assessments and update policies and controls based on findings.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A pipeline operator is explaining to a new board member why the company's security posture is important. Which statement BEST captures the value of a strong security posture for an ICS/SCADA environment?

   • AIt reduces the likelihood and impact of cyber incidents that could affect safety and availability
   • BIt allows the company to eliminate the need for incident response planning
   • CIt guarantees that no cyberattack will ever succeed against the OT network
   • DIt ensures compliance with all international cybersecurity standards
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A utility company is merging with another utility. The two companies have different security policies and control frameworks. The merged entity wants to establish a unified security posture. What is the first step?

   • AKeep the two security postures separate to avoid conflicts.
   • BMerge the two networks immediately to reduce complexity.
   • CConduct a joint risk assessment to identify the combined risks and gaps.
   • DAdopt the stricter of the two security policies immediately.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A regional water utility recently suffered a ransomware incident that encrypted the HMI servers but did not affect the PLCs. The board has asked the OT security team to 'improve the security posture' before restoring full operations. The team has limited budget and must prioritize actions. Which action should the team take FIRST to address the most critical gap exposed by the incident?

   • ADeploy an EDR agent on every OT workstation and server
   • BReplace all HMI software with a newer version that includes built-in encryption
   • CSegment the OT network so that HMI and IT systems cannot directly reach each other
   • DConduct a full penetration test of the OT environment before restoring systems
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A refinery has a security posture assessment that shows a high number of low-severity findings and a few high-severity findings. The security team has limited resources and wants to improve the posture efficiently. What is the most effective prioritization strategy?

   • AAddress all findings simultaneously to improve the posture quickly.
   • BAddress the low-severity findings first because they are easier to fix.
   • CIgnore the findings and wait for the next assessment.
   • DAddress the high-severity findings first, even if they are more complex.
   Reveal Solution Discussion Select an answer first